Developed and implemented information security policies, procedures, and guidelines to comply with regulatory requirements and industry best practices.• Implemented ISO 27001:2013 framework and assisted in compliance audits for security frameworks, PCI-DSS and SOC-2.• Conducted readiness audits to ensure compliance with IBEX policies and security frameworks.• Conducted risk assessments, identified security gaps, and developed remediation plans to improve… Show more Developed and implemented information security policies, procedures, and guidelines to comply with regulatory requirements and industry best practices.• Implemented ISO 27001:2013 framework and assisted in compliance audits for security frameworks, PCI-DSS and SOC-2.• Conducted readiness audits to ensure compliance with IBEX policies and security frameworks.• Conducted risk assessments, identified security gaps, and developed remediation plans to improve overall security posture of IBEX.• Managed day-to-day operations of information security program and ensured effective implementation of security controls.• Monitored compliance with ISMS policies and regulations and identified opportunities for continuous improvement.• Keep abreast of the latest security trends, regulations, and best practices to ensure ISMS remains relevant and effective.• Contributed to the IBEX's strategic thinking, planning, and organizational efforts in the realm of IT security.• Engaged with cross-functional teams and stakeholders to ensure effective integration of security considerations into business processes.• Communicated audit findings and recommendations to senior management. • Familiarity with data loss prevention (DLP), privileged access management (PAM), and identity and access management (IAM) solutions Show less

Control Implementation of ISO 27001 across the entire organization, in addition to regulatory requirements for information security.

Conducting system and security audits across multiple functions, including IT, IS, Compliance, Finance, and HR, in accordance with ISO 27001, OWASP Top 10, SBP guidelines, and internal policies.